JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 121.53.221.228

121.53.221.228 was found in our database!

This IP was reported 6 times. Confidence of Abuse is 24%: ?

24%

ISP	Kakao Corp.
Usage Type	Commercial
ASN	AS18160
Domain Name	kakaocorp.com
Country	🇰🇷 Korea (the Republic of)
City	Seoul, Seoul

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 121.53.221.228

Whois 121.53.221.228

IP Abuse Reports for 121.53.221.228:

This IP address has been reported a total of 6 times from 5 distinct sources. 121.53.221.228 was first reported on October 25th 2025, and the most recent report was 2 days ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇺🇸 kosada.com	2026-10-15 07:38:29 (2 days ago)	Repeated requests classified as pathological web bot behavior, for example: /uploads/short-url/js7CM ... show more Repeated requests classified as pathological web bot behavior, for example: /uploads/short-url/js7CMu5vjA6fBpnL7ZyOiwXo8bU.vuo (HTTP/1.1 port 443) show less	DDoS Attack Bad Web Bot
🇺🇸 TPI-Abuse	2026-10-15 01:28:05 (2 days ago)	(mod_security) mod_security (id:210730) triggered by 121.53.221.228 (-): 1 in the last 300 secs; Por ... show more (mod_security) mod_security (id:210730) triggered by 121.53.221.228 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 21:28:00.381266 2026] [security2:error] [pid 14928:tid 14928] [client 121.53.221.228:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy\|\|www.swarnar.com\|F\|2"] [data ".nytimes.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.swarnar.com"] [uri "/www.nytimes.com"] [unique_id "atAsICVsUtuvER6BtqKKswAAABI"] show less	Brute-Force Bad Web Bot Web App Attack
🇯🇵 VXG-NET	2026-10-10 22:41:48 (6 days ago)	port=80, indicator_type=code-execution	Hacking
🇨🇭 Origon	2025-11-10 00:17:17 (11 months ago)	http-bad-user-agent - IP: 121.53.221.228 - time="2025-11-10T01:17:17+01:00" level=info msg="(555f66 ... show more http-bad-user-agent - IP: 121.53.221.228 - time="2025-11-10T01:17:17+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 121.53.221.228 (KR/18160) : 4h ban on Ip 121.53.221.228" show less	Bad Web Bot
🇨🇭 Origon	2025-11-02 16:17:44 (11 months ago)	http-bad-user-agent - IP: 121.53.221.228 - time="2025-11-02T17:17:44+01:00" level=info msg="(555f66 ... show more http-bad-user-agent - IP: 121.53.221.228 - time="2025-11-02T17:17:44+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-bad-user-agent by ip 121.53.221.228 (KR/18160) : 4h ban on Ip 121.53.221.228" show less	Bad Web Bot
🇳🇱 exxos	2025-10-25 15:03:01 (11 months ago)	Attacks with Bad user agents	Hacking

Showing 1 to 6 of 6 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇭🇹 200.113.230.211

🇰🇷 118.36.136.12

🇸🇬 43.163.6.201

🇧🇷 200.217.4.73

🇧🇪 198.235.24.218

🇹🇼 101.13.4.120

🇸🇪 89.233.202.252

🇳🇱 77.239.124.146

🇰🇷 14.33.93.214

🇸🇬 139.59.106.45

🇺🇸 43.110.23.186

🇰🇷 14.45.100.221

🇺🇸 192.253.209.78

🇺🇸 192.253.209.72

🇺🇸 162.216.150.38

🇸🇪 104.243.196.45

🇺🇸 68.81.241.135

🇸🇳 41.208.147.131

🇩🇪 139.59.143.102

🇰🇷 115.160.124.86